14:00:47 #startmeeting fwaas 14:00:47 Meeting started Tue Jun 20 14:00:47 2017 UTC and is due to finish in 60 minutes. The chair is SridarK_. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:00:49 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 14:00:52 The meeting name has been set to 'fwaas' 14:01:00 #chair yushiro xgerman 14:01:01 Warning: Nick not in channel: xgerman 14:01:02 Current chairs: SridarK_ xgerman yushiro 14:01:03 o/ 14:01:05 hi all O/ 14:01:10 hi all 14:01:15 #chair xgerman 14:01:17 Current chairs: SridarK_ xgerman yushiro 14:01:41 Hi All i think folks are joining in 14:02:01 Hi 14:02:39 ok lets get started 14:02:44 #topic Pike 14:03:27 lets get started with L2 changes 14:03:40 i dont see chandanc online 14:03:53 SridarK_, yes.... Can I start to talk about L2-agent? 14:03:53 SarathMekala: do u know if chandanc will be joining ? 14:04:07 hi, sorry for late 14:04:07 yushiro: yes pls 14:04:11 OK 14:04:28 Chandan is on PTO for 10 days.. has some personal commitments 14:04:37 SarathMekala: ok 14:04:47 he will be reachable on mail 14:04:51 #link https://review.openstack.org/#/c/323971/ 14:04:56 SarathMekala: ok thx 14:05:14 L2-agent patch, I'll adding UTs. slow progress.. 14:05:25 #link https://review.openstack.org/#/c/475183/ 14:05:54 This is a patch that makes default fwg configurable(on/off) 14:06:26 I just added a parameter [fwaas] default_firewall_group = True|False 14:06:30 yushiro: ok great 14:07:07 Hmm, However, current impl includes so complexity for state transition. 14:07:16 yushiro: hmm 14:08:02 e.g. If we start def_fwg = False and create fwg named 'default'. After that, we changed 'def_fwg = True' ... 14:09:00 But, I'll finish current impl until it works correctly. 14:09:06 it should be true by default — we want people to use it ;-) 14:09:15 folks, please feel free to comment my patch. 14:09:18 yushiro: will having it so that this behavior change can only happen on startup make it easier ? 14:09:19 xgerman_, yeah :) 14:09:47 i presume we do this via an ini file ? 14:09:53 let me look at the patch 14:10:20 well, we shoudl warn people from switching it on/off and telling them only NEWLY created VMs are affected 14:10:56 also redip tweeted me he is running late 14:11:04 SridarK_, yes, please. current impl, a definition in ml2_conf.ini ('default_firewall_group' = True/False) are loaded by server side and agent side. 14:11:34 xgerman_, I see. I'll take care of warning messages for switching. 14:11:36 yushiro: ok - it is important that we keep it simple and there is no ambiguity 14:11:45 but yes lets discuss on gerrit 14:11:53 +1 14:12:03 SridarK_, yes. 14:12:53 yushiro: anything else u want to discuss ? 14:13:08 from l2 agent side, nothing. 14:13:13 SridarK_, please going on :) 14:13:13 ok 14:14:00 SarathMekala: I will reach out to chandanc but dont want to disrupt his PTO - to see if there is something we can pick up to help 14:14:17 SarathMekala: if u get a chance to talk to him pls mention it as well 14:14:53 I think the driver changes were in pretty good shape, there is probab more integration we will need to test 14:15:11 SarathMekala, SridarK_ ah, I'll also rebase ovs driver's patch because it raises an exception for referring constant values. 14:15:25 sure SridarK_ 14:15:30 Let me look into this and yushiro we can sync on the integration with L2 Agent 14:15:41 +1 14:15:52 i am sure we may need some minor tweaks on the plugin as well - i can certainly look at that 14:16:20 We have about a month to Pike 3 milestone 14:16:28 so we can try to pull things together 14:16:39 ok lets move on 14:16:56 SarathMekala: pls go ahead on Dashboard changes 14:17:27 hi guys sorry 14:17:29 just caME 14:17:33 Akihiro has created a new repo for horizon dashboard 14:17:38 reedip_, welcome :) 14:17:45 it got approved yesterday 14:17:54 awesome!! 14:17:59 SarathMekala, great :) 14:18:00 SarathMekala: cool so now u are unblocked 14:18:12 yes SridarK_ 14:18:21 I am sending out for a review now 14:18:38 should be available by the end of this meeting 14:18:50 most of the functionality is avialable 14:18:58 SarathMekala: perfect - u will need more lead time as u want review from Horizon core (Akihiro included) 14:19:00 except adding and removing ports from FWG 14:19:13 yes SridarK_ 14:19:22 SarathMekala, OK, please feel free to assign me as a reviewer. 14:19:33 sure yushiro 14:19:45 I think we have approval rights but u will get more meaningful and useful comments from Akihiro and other Horizon cores 14:19:47 will add all the team 14:20:02 +1 14:20:09 yes SridarK_, Akihiro has mentioned that he will review the changes 14:20:29 SarathMekala: yes from past experience - u will get very good reviews from him 14:20:31 ok great 14:20:41 great :) 14:20:57 and i think u have enough time now to get the changes in ahead of Feature Freeze 14:21:13 yes SridarK_ 14:21:28 I will send across instructions on installing the UI plugin 14:21:29 And it will easier to do some testing with the dashboard 14:21:36 SarathMekala: perfect 14:21:49 if anyone has bandwidth please install it and try it out 14:21:56 +1 14:22:13 cool 14:22:34 +1 14:22:41 SarathMekala, Could you tell me how to enable our dashboard? enable_plugin ? 14:23:10 thats yet to be worked out 14:23:39 for now we will have to manually copy and test it out 14:23:47 SarathMekala, I see :) 14:23:56 devstack updates have to be looked into 14:24:37 SarathMekala, OK, I'll try it copy and restart apache2 service 14:24:40 ok just publish the steps to get it going and we can live with that for now and gradually work in the peripheral changes 14:25:04 SarathMekala: anything else u would like to discuss ? 14:25:09 sure SridarK_ 14:25:13 thats it from my side 14:25:45 ok 14:25:53 #topic Stadium Compliance 14:25:58 reedip_: pls go ahead 14:26:47 I chatted with him last night 14:26:49 https://review.openstack.org/#/c/471699/ 14:26:57 is a revert and he offered to options: 14:27:13 a) Revert the whole patch, rework it and then publish it again 14:27:13 11:01 PM b) Partially revert the patch (https://review.openstack.org/471720) and dedicate time to fix the fwaas and midonet in parallel 14:27:53 the revert will fix midonet — and I am not sure if we should revert or fix the bug (b) 14:28:07 Thoughts? 14:28:18 hi 14:28:25 there you are :-) 14:28:39 IMHO the complete revert is a last resort 14:28:49 Well considering that midonet gate is failing, we can go ahead and revert the whole thing 14:28:52 this patch is being discussing in neutron team meeting right now :-) 14:29:01 how timely 14:29:47 reedip_: what is ur assessment in terms of having a fix to get midonet back on track ? 14:30:10 SridarK_ : Well the partial revert which I proposed passes midonet when tests are executed SERIALLY 14:30:25 but not parallely means there is some left over stuff which is causing the midonet gate to fail 14:30:31 reedip_: but that is probab not an acceptable constraint 14:31:06 SridarK_ : Yes I know that the parallel execution should work in the gate 14:31:46 SridarK_ , xgerman : I agree complete revert would get us back in the stadium proposal and push back other patches 14:32:26 but letting midonet gate stop is not a very acceptable solution. We can always push our patch once we get another look at it 14:32:46 mlavelle might also look at it 14:33:31 reedip_, OK, so, we're going to revert https://review.openstack.org/#/c/471699/, right? 14:34:06 at the beginning of (a) 14:34:16 yushiro : considering the midonet gate is broken, I think so. However, I will still look into https://review.openstack.org/471720 14:34:34 reedip_: ok 14:35:47 I am wondering what makes it different for midonet 14:36:05 SridarK_ probably how the service is loaded 14:36:12 since we are ok with neutron-lib 14:36:48 SridarK_ there were some modifications in the Unit tests as well , which might be the reason why the issue didnt materliazie 14:37:19 SridarK_ the thing is, if I am understanding correctly, that the extension once loaded is not unloaded , which I think yushiro also saw 14:37:22 in the past too we have had issues since we have no way of telling, but usually working with yamamoto has resulted in the proper fix 14:38:45 SridarK_ let me discuss it once with him tomorrow morning and add him as a reviewer to the new patch for neutronlib migration 14:39:03 reedip_, +1 It'll so helpful !! 14:39:11 +1 14:39:51 reedip_: ok even if we can do a partial back out will be preferrable but if this needs more time then we may need to go with the revert and double back for the final fix 14:39:58 reedip_: thx for following up on this 14:40:14 +1 14:40:24 when do we decide if we need to full revert? 14:40:33 right now ? 14:40:37 reedip_: do u think we can allocate a time to do some debugging together ? 14:41:02 SridarK_ xgerman_ : if you guys have time, we can discuss this issue after meeting 14:41:05 reedip_: do u want to talk to yamamoto and then we can go for it 14:41:23 reedip_, please sync with me tomorrow :) 14:41:26 reedip_: right after mtg - i have a conflict 14:41:33 can we try tomorrow ? 14:41:39 SridarK_ xgerman_ or tomorrow evening 0200 UTC ? 14:41:57 tomorrow morning * 14:42:15 10 am EST 14:42:18 It would sync up with me and yushiro 14:42:20 works 14:42:58 is that 10am EST or 10pm EST ? 14:43:02 10 PM EST :) 14:43:09 am 14:43:45 xgerman_: 14:00 would be 10am 14:43:46 xgerman_ 0200 UTC is 10 AM EST ? 14:44:00 no not 1400 UTC, 0200 UTC :) 14:44:19 Google told me wrong 14:44:28 it works for me 14:44:34 but xgerman_ it is a bit late for u 14:44:54 I cna do it if I get the day right ;-) 14:44:59 :-) 14:45:16 ok so lets do that, i think it will be a good time for yushiro also 14:45:41 ok, done ... its 0730 for me, so I will leave office at 0630 :P 14:45:42 so reedip_ u are saying in about 11hrs and 15 mins ? 14:45:52 Roughly 14:45:58 ok cool 14:46:06 lets ping each other on fwaas channel 14:46:19 2:00 UTC is good for me 14:46:33 i can set up a webex if screen sharing and voice makes it easier too 14:46:36 Ok, I'll keep on joining IRC. 14:47:00 will be good to assess the damage and some plan for remediation - even if we do have to revert 14:47:38 Ok done 14:47:46 reedip_: thx for staying on top of this 14:47:51 should we move on now , 13 minutes left 14:48:13 yes, reedip_ anything else on any related stadium topic ? 14:48:49 ok lets move on 14:48:55 SridarK_ Not as of now 14:49:19 #topic Performance Improvement 14:49:32 annp_: hoangcx_: things u would like to discuss ? 14:49:50 i think we missed this due to time on last few mtgs 14:49:50 SridarK_: Oops, No. I think we are Ok with FWaaS v1. 14:50:17 Now we are proposing the same solution to Neutron (without configurable) 14:50:22 and how are things panning out with SG - are we making the changes 14:50:29 ah ok u read my mind :-) 14:50:46 :) 14:51:05 It is getting good comment from Kevin that we don't need to support configuratable in neutron 14:51:21 hoangcx_: ok great 14:51:22 Just use Netlink solution. Now, we are adopting 14:51:51 Sounds good 14:52:01 hoangcx_, coooooool 14:52:02 this is the work: https://review.openstack.org/#/c/470912/ 14:52:11 +1 14:52:22 #topic Open Discussion 14:52:50 So priorities for this week - resolution of neutron-lib issues and L2 integration 14:53:02 possibly for next 2 weeks 14:53:05 Yes. 14:53:19 we have roughly 4 - 5 weeks 14:53:55 also looking ahead PTG is coming and other teams are already starting their etherpads 14:53:56 ok 14:54:04 Is anyone planning or will have budget for PTG ? 14:54:26 Hi, I just like to informe you I started to work on a patch that will permits to use a driver for fwaas service plugin which is not based on the Neutron DB 14:54:27 yes, try to get travel support program :) 14:54:31 I may not have the budget for the PTG 14:54:38 doude: hi 14:54:41 doude : link ? 14:54:47 Maybe I can.. 14:54:58 doude: what is the use case ? 14:55:02 I'm working on that to add supprt of the fwaas extension for Contrail neutron core plugin 14:55:35 which is not use the ML2 framework or the Neutron db model 14:55:45 doude : better to have a bug ( in case you havent logged one yet ) 14:55:48 we don't want to duplicate the source of trust 14:56:00 #link https://etherpad.openstack.org/p/fwass_ptg_denver 14:56:10 doude : any reason for moving away from ML2 framework? 14:56:13 doude - Edouard ? 14:56:19 xgerman_, thanks!! 14:56:20 so we can collect whose attending and who is not and/or skip the PTG all together 14:56:24 I did not yet pushed the code, it's still a very early step 14:56:31 I'll in the week I hoe 14:56:35 hope* 14:56:59 doude is this for Open Contrail? 14:57:29 Maybe SarathMekala, and chandan knows about Contrail?? 14:57:41 doude: ok cool - welcome - i think we spoke earlier at BCN ? 14:57:42 Not for the new networking-opencontrail project but for the actual contrail neutron plugin 14:58:19 new project networking-opencontrail will be based on the ML2 framework 14:58:39 but not it just bootstrapped in the last summit 14:58:49 ok 14:58:56 ok almost at time 14:58:58 me I wok on the core driver actually used and deployed in our clients 14:59:03 doude : do share the link 14:59:06 lets continue more next mtg 14:59:08 or add us in the patch 14:59:17 ^^ +1 14:59:21 yes reedip_, we discuss about that bug https://review.openstack.org/#/c/474524/1 14:59:22 doude, hope to join next meeting :) 14:59:33 ok folks lets call it - we are at time 14:59:40 yes I'll and I hope to have some code to show 14:59:40 have a great week and thx for joining 14:59:47 see u tomorrow 14:59:51 #endmeeting